NetBackup™ Web UI Administrator's Guide
- Introducing NetBackup
- About NetBackup
- NetBackup documentation
- NetBackup web UI features
- NetBackup administration interfaces
- Terminology
- First-time sign in to the NetBackup web UI
- Sign in to the NetBackup web UI
- Sign out of the NetBackup web UI
- Documentation for Catalog Recovery Wizard, disk array hosts, disk pools, and Host Properties in the NetBackup web UI
- Section I. Monitoring and notifications
- Monitoring NetBackup activity
- The NetBackup dashboard
- Activity monitor
- Job monitoring
- Workloads that require a custom RBAC role for specific job permissions
- View a job
- View the jobs in the List view
- View the jobs in the Hierarchy view
- Jobs: cancel, suspend, restart, resume, delete
- Search for or filter jobs in the jobs list
- Create a jobs filter
- Edit, copy, or delete a jobs filter
- Import or export job filters
- Troubleshooting the viewing of jobs
- Notifications
- Monitoring NetBackup activity
- Section II. Configuring hosts
- Managing host properties
- Managing credentials for workloads and systems that NetBackup accesses
- Overview of credential management in NetBackup
- Add a credential in NetBackup
- Add a credential for an external KMS
- Add a credential for NetBackup Callhome Proxy
- Edit or delete a named credential
- Add a credential for Network Data Management Protocol (NDMP)
- Edit or delete Network Data Management Protocol (NDMP) credentials in NetBackup
- Managing deployment
- Section III. Configuring storage
- Section IV. Configuring backups
- Section V. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Managing user sessions
- Managing the security settings for the primary server
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- Configure the global data-in-transit encryption setting
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- About TLS session resumption
- Set a passphrase for disaster recovery
- About trusted primary servers
- Using access keys, API keys, and access codes
- Configuring authentication options
- Managing role-based access control
- RBAC features
- Authorized users
- Configuring RBAC
- Notes for using NetBackup RBAC
- Add AD or LDAP domains
- View users in RBAC
- Add a user to a role (non-SAML)
- Add a smart card user to a role (non-SAML, without AD/LDAP)
- Add a user to a role (SAML)
- Remove a user from a role
- Disable web UI access for operating system (OS) administrators
- Disable command-line (CLI) access for operating system (OS) administrators
- Default RBAC roles
- Add a custom RBAC role
- Role permissions
- Manage access permission
- View access definitions
- Section VI. Detection and reporting
- Detecting malware
- About malware detection
- Configure a new scan host pool
- Add an existing scan host
- Manage credentials
- Remove the scan host
- Deactivate the scan host
- Scan a policy client backup images for malware
- Perform malware scanning
- Scan a VMware asset for malware
- View the malware scan status
- Actions for malware scanned images
- Recover from malware-affected images (clients protected by policies)
- Recover a VMware asset affected by malware
- Troubleshooting
- Detecting anomalies
- Usage reporting and capacity licensing
- Detecting malware
- Section VII. NetBackup workloads and NetBackup Flex Scale
- Section VIII. Disaster recovery and troubleshooting
Approve or add mappings for a host that has multiple host names
A NetBackup host can have multiple host names. For example, both a private and a public name or a short name and a fully qualified domain name (FQDN). A NetBackup host may also share a name with other NetBackup host in the environment. NetBackup also discovers cluster names, including the host name and fully qualified domain name (FQDN) of the virtual name of the cluster.
See Examples of auto-discovered mappings for a cluster.
See Example of auto-discovered mappings for a cluster in a multiple NIC environment.
See Examples of auto-discovered mappings for SQL Server environments.
The NetBackup client name of a host (or the primary name) is automatically mapped to its host ID during certificate deployment. For successful communication between NetBackup hosts, NetBackup also automatically maps all hosts to their other host names. However, that method is less secure. Instead, you can choose to disable this setting. Then choose to manually approve the individual host name mappings that NetBackup discovers.
See Disable automatic mapping of NetBackup host names.
NetBackup automatically discovers many shared names or cluster names that are associated with the NetBackup hosts in your environment. Use the Mappings to approve tab to review and accept the relevant host names. When is enabled, the list shows only the mappings that conflict with other hosts.
Note:
You must map all available host names with the associated host ID. When you deploy a certificate to a host, the host name must map to the associated host ID. If it does not, NetBackup considers the host to be a different host. NetBackup then deploys a new certificate to the host and issues it a new host ID.
To approve the host names that NetBackup discovers
- On the left, select Security > Host mappings.
- Click the Mappings to approve tab.
- Click the name of the host.
- Review the mappings for the host and click Approve if you want to use the discovered mapping.
Click Reject if you do not want to associate the mapping with the host.
The rejected mappings do not appear in the list until NetBackup discovers them again.
- Click Save.
You can manually map the NetBackup host to its host names. This mapping ensures that NetBackup can successfully communicate with the host using the other name.
To map a host name to a host
- On the left, select Security > Host mappings.
- Select the host and click Manage mappings.
- Click Add.
- Enter the host name or IP address and click Save.
- Click Close.
Add a shared or a cluster name mapping if multiple NetBackup hosts share a host name. For example, a cluster name.
Note the following before you create a shared or a cluster name mapping:
NetBackup automatically discovers many shared names or cluster names. Review the Mappings to approve tab.
If a mapping is shared between an insecure and a secure host, NetBackup assumes that the mapping name is secure. However, if at run-time the mapping resolves to an insecure host, the connection fails. For example, assume that you have a two-node cluster with a secure host (node 1) and an insecure host (node 2). In this case, the connection fails if node 2 is the active node.
To map shared or cluster names to multiple NetBackup hosts
- On the left, select Security > Host mappings.
- Click Add shared or cluster mappings.
- Enter a Shared host name or cluster name that you want to map to two or more NetBackup hosts.
For example, enter a cluster name that is associated with NetBackup hosts in your environment.
- On the right, click Add.
- Select the NetBackup hosts that you want to add and click Add to list.
For example, if you entered a cluster name in step 3 select the nodes in the cluster here.
- Click Save.
For a cluster with hosts client01.lab04.com and client02.lab04.com, you may see the following entries. For each host, approve the mappings that are valid.
Host | Auto-discovered mapping |
|---|---|
client01.lab04.com | client01 |
client01.lab04.com | clustername |
client01.lab04.com | clustername.lab04.com |
client02.lab04.com | client02 |
client02.lab04.com | clustername |
client02.lab04.com | clustername.lab04.com |
When you have approved all valid mappings, you see the Mapped host or IP address settings that are similar to the following entries.
Host | Mapped Host Names/IP Addresses |
|---|---|
client01.lab04.com | client01.lab04.com, client01, clustername, clustername.lab04.com |
client02.lab04.com | client02.lab04.com, client02, clustername, clustername.lab04.com |
Backups of a cluster in a multi-NIC environment require special mappings. You must map the cluster node names to the virtual name of the cluster on the private network.
Table: Mapping host names for a cluster in a multi-NIC environment
Private name of Node 1 | Virtual name of the cluster on the private network |
Private name of Node 2 | Virtual name of the cluster on the private network |
For example, for a cluster in a multi-NIC environment with hosts client01-bk.lab04.com and client02-bk.lab04.com, you may see the following entries. For each host, approve the mappings that are valid.
Host | Auto-discovered Mapping |
|---|---|
client01-bk.lab04.com | clustername-bk.lab04.com |
client02-bk.lab04.com | clustername-bk.lab04.com |
When you have approved all valid mappings, you see the Mapped host or IP address settings that are similar to the following entries.
Host | Mapped Host Names/IP Addresses |
|---|---|
client01-bk.lab04.com | clustername-bk.lab04.com |
client02-bk.lab04.com | clustername-bk.lab04.com |
In Table: Example mapped host names for SQL Server environments, FCI is a SQL Server failover cluster instance. WSFC is Windows Server Failover Cluster.
Table: Example mapped host names for SQL Server environments
Environment | ||
|---|---|---|
FCI (cluster with two nodes) | Physical name of Node 1 | Virtual name of the SQL Server cluster |
Physical name of Node 2 | Virtual name of the SQL Server cluster | |
Basic or advanced availability group (primary and secondary) | Primary name | WSFC name |
Secondary name | WSFC name | |
Basic or advanced availability group, with an FCI (primary FCI and secondary FCI) | Primary FCI name | WSFC name |
Secondary FCI name | WSFC name | |
Physical name of Node 1 | Virtual name of the SQL Server cluster | |
Physical name of Node 2 | Virtual name of the SQL Server cluster |